Principal Cyber & Information Security Advisor

About Hanwha Defence Australia

Hanwha Defence Australia (HDA) is delivering some of Australia's most significant and complex Defence programs. As part of a global defence and technology organisation, we are committed to strengthening Australia's sovereign capability through innovation, collaboration, and world-class technology solutions.

We are seeking a Principal Cyber & Information Security Advisor to play a pivotal role in shaping and advancing HDA's cyber security and information security capability across the enterprise and our supply chain ecosystem.

About the Role

Reporting to the Chief Information Security Officer, this position is responsible for driving cyber and information security governance, risk management, compliance, and strategic sourcing security assurance across HDA.

You will act as a trusted advisor to business leaders, program teams, and key stakeholders, providing expert guidance on cyber risk, security frameworks, supplier assurance, and regulatory requirements. You will also play a key role in ensuring secure delivery of critical Defence programs while strengthening HDA's overall security posture.

This is an exceptional opportunity for a security professional who enjoys working across complex environments, influencing senior stakeholders, and contributing to Australia's Defence capability.

Key Responsibilities

• Provide expert cyber and information security advice across HDA programs and operational functions.
• Act as the primary Information Security SME for program streams, ensuring alignment with organisational security requirements and best practice.
• Collaborate with Program Managers and Cyber Security teams to implement enterprise-wide information security risk management strategies.
• Conduct security risk assessments, data analysis, compliance reviews, and develop reports and briefings for leadership.
• Monitor and assess emerging cyber threats, legislative changes, regulatory requirements, and industry developments.
• Translate complex technical security risks into meaningful business insights through presentations, reports, dashboards, and executive briefings.
• Support governance activities, assurance programs, and independent security oversight initiatives.
• Lead supplier and third-party information security assessments as part of HDA's Strategic Sourcing governance framework.
• Partner with Procurement, Supplier Owners, Service Providers, Project Teams, and external stakeholders to manage supply chain security risks.
• Contribute to strengthening security controls that protect the confidentiality, integrity, and availability of information across HDA and its supply chain.
• Support ad hoc security initiatives as directed by the Chief Information Security Officer (CISO) or Chief Security Officer (CSO).
• Champion Hanwha Defence Australia values and behaviours.

About You

You are a seasoned cyber security and information security professional with experience operating within highly regulated environments, ideally within Defence or Defence industry programs.

You combine strong technical knowledge with commercial awareness, excellent stakeholder engagement skills, and the ability to influence decision-making at all levels of an organisation.

Skills & Experience

• Defence industry experience.
• Minimum 5+ years' experience in Cyber Security, Information Security, Governance, Risk, Compliance, or related disciplines.
• Experience managing supplier security assurance, third-party risk, and supplier relationship management activities.
• Experience within regulated information security environments.
• Strong understanding of risk management principles, control frameworks, risk treatment, and assurance activities.
• Knowledge of ISO 31000 Risk Management Framework (or equivalent) and/or Commonwealth Security Assessment and Authorisation processes.
• Understanding of cyber security and information security standards including:

-DSPF

-PSPF

-ISM

-NIST Frameworks

• Demonstrated experience communicating complex technical risks to both technical and non-technical stakeholders.
• Experience working independently and collaboratively with internal and external stakeholders.

Technical Knowledge

A strong understanding of at least two of the following areas:

• Secure Software Development Lifecycle (SDLC)
• NIST Secure Software Development Framework (SSDF)
• Infrastructure Security
• Information Security Governance
• Cyber Security Operations and Risk Management

Additionally, experience with the following will be highly regarded:

• Vulnerability Management
• Software Bill of Materials (SBOMs)
• Approved Product List assessments and product security evaluations
• NIST 800-171, NIST 800-53, and Cyber Supply Chain Risk Management (C-SCRM) frameworks

Qualifications

Essential

• Bachelor's degree in Computer Science, Cyber Security, Information Systems, Engineering, Supply Chain Management, or a related discipline.

Desirable Certifications

• Systems Security Certified Practitioner (SSCP)
• Certified Information Security Auditor (CISA)
• Certified Secure Software Lifecycle Professional (CSSLP)
• Certified in Risk and Information Systems Control (CRISC)
• Other relevant cyber security or risk management certifications

Why Join Hanwha Defence Australia?

• Contribute to nationally significant Defence programs.
• Work with industry-leading technology and security professionals.
• Influence cyber security outcomes across complex and critical environments.
• Collaborative and values-driven workplace culture.

What we can offer you

• 9 Day fortnight
• Competitive salaries
• Flexible Working arrangements
• Paid Parental Leave
• Defence Reservist Leave
• Professional Development
• Health & Wellbeing Platform including an Employee Assistance Program

Apply Now

If you are passionate about strengthening cyber resilience, managing complex security risks, and supporting Australia's sovereign Defence capability, we encourage you to apply.

Join Hanwha Defence Australia and help shape the future of secure Defence technology.

Hanwha Defence Australia is an Equal Opportunity Employer and encourages Aboriginal and Torres Strait Islanders to apply. We also welcome applications from individuals with culturally diverse backgrounds.

We are a proud supporter of the Veterans' Employment Program and welcome the interest of ex-service members, veterans and their families.